diff --git a/.trivyignore b/.trivyignore
index 14bf806..7bec780 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -1,6 +1,8 @@
 # pebble
 CVE-2025-61729
 CVE-2025-68121
+# falcosidekick - CVE-2026-33186 fixed in grpc 1.79.3; temporary until falcosidekick updates grpc (latest v2.33.0 uses v1.75.0)
+CVE-2026-33186
 # falcosidekick 2.23.0
 CVE-2021-3127
 CVE-2022-21698
diff --git a/docs/requirements.txt b/docs/requirements.txt
index b6829df..425c2d5 100644
--- a/docs/requirements.txt
+++ b/docs/requirements.txt
@@ -4,7 +4,7 @@ canonical-sphinx==0.6.0
 # Extensions previously auto-loaded by canonical-sphinx
 myst-parser==4.0.1
 sphinx-autobuild==2024.10.3
-sphinx-design==0.6.1
+sphinx-design==0.7.0
 sphinx-notfound-page==1.1.0
 sphinx-reredirects==0.1.6
 sphinx-tabs==3.5.0